CVE-2023-45350

Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm. This is also known as OSFOURK-24034.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*

History

12 Oct 2023, 18:36

Type Values Removed Values Added
CPE cpe:2.3:a:atos:unify_openscape_4000_manager:10:r0:*:*:*:*:*:*
cpe:2.3:a:atos:unify_openscape_4000_manager:10:r1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
First Time Atos unify Openscape 4000 Manager
Atos
CWE NVD-CWE-noinfo
References (MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - (MISC) https://www.news.de/technik/856969401/unify-openscape-4000-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-bekannte-schwachstellen-und-sicherheitsluecken/1/ - Press/Media Coverage
References (MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - (MISC) https://networks.unify.com/security/advisories/OBSO-2306-01.pdf - Vendor Advisory

09 Oct 2023, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-09 04:15

Updated : 2024-02-28 20:33


NVD link : CVE-2023-45350

Mitre link : CVE-2023-45350

CVE.ORG link : CVE-2023-45350


JSON object : View

Products Affected

atos

  • unify_openscape_4000_manager